$ rpki-client -vvf rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft File: QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft (raw, json) Hash identifier: zPhfAMtx69WWBur6B4GWEgg1ekpuR6L1VyKLQo6Mais= Subject key identifier: FE:60:EA:06:55:5D:18:DF:D1:B6:65:62:E6:6B:6B:D9:26:21:8C:84 Authority key identifier: 42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC Certificate issuer: /CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Certificate serial: 0B96 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft Manifest number: 0B7A Signing time: Sat 18 May 2024 19:38:46 +0000 Manifest this update: Sat 18 May 2024 19:38:46 +0000 Manifest next update: Sat 25 May 2024 19:38:46 +0000 Files and hashes: 1: QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl (hash: U5TAvabT4vSZWpWxxzwGQRO/h6k/GNkBZsv2shUmltY=) 2: 3C719B64EA8B11EEAFEF872BC4F9AE02.roa (hash: FUTy/lo1z8mp0GryXZyPvcoilmNYwt/GXvIYxtSxbmE=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Sat 25 May 2024 19:38:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2966 (0xb96) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A918DB4E/serialNumber=42758DE0CC0CF62C2AEEE93E0EEE67903A502CCC Validity Not Before: May 18 19:38:46 2024 GMT Not After : May 25 19:38:46 2024 GMT Subject: CN=664903c6-ae7a Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:63:14:dc:14:9c:94:44:b1:f8:53:ce:3b:9c: 85:e3:90:67:4a:8b:90:06:15:45:8c:58:07:39:13: 36:03:81:f5:ea:11:03:f8:22:d2:47:2d:1a:e9:52: ad:af:a4:ba:0f:24:f7:fc:ca:ae:45:04:eb:59:1b: 66:d8:61:8f:d6:9a:4e:1a:06:a6:5f:0d:4e:2d:c0: 87:3a:fc:a1:a9:a7:26:0f:22:9d:83:b5:c9:57:ee: 20:59:22:4e:57:0e:d8:71:fa:f8:09:fd:f8:ef:20: d0:54:b5:ab:41:61:af:09:47:b1:04:50:60:d6:d3: 01:66:58:e9:03:25:ed:02:fd:42:1a:f5:dc:f3:6f: 0f:03:1a:a5:4c:31:b8:99:e5:51:24:fb:ba:9a:19: 83:97:bc:08:45:65:23:a8:6d:53:8d:96:33:ba:36: f8:a2:06:24:2f:75:a5:f8:29:71:6a:13:ef:82:3b: c2:b8:22:af:8b:26:86:f2:5a:da:3d:48:a8:9b:ad: a0:12:0d:ad:0e:f6:70:92:81:5c:0a:53:21:f1:7e: af:a1:8a:68:20:c2:08:67:55:88:06:f6:f2:39:39: bd:40:36:f6:0a:a6:07:7a:ec:13:b5:31:76:3d:96: 15:53:09:34:6e:36:a2:3c:c3:b7:9f:17:46:38:92: b8:b1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: FE:60:EA:06:55:5D:18:DF:D1:B6:65:62:E6:6B:6B:D9:26:21:8C:84 X509v3 Authority Key Identifier: keyid:42:75:8D:E0:CC:0C:F6:2C:2A:EE:E9:3E:0E:EE:67:90:3A:50:2C:CC X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/QnWN4MwM9iwq7uk-Du5nkDpQLMw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918DB4E/77E7F9A00CE511EAA20DDD82C4F9AE02/QnWN4MwM9iwq7uk-Du5nkDpQLMw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 9a:bc:ae:46:da:05:2c:fe:81:5f:9b:ae:1f:9e:a5:25:38:35: b0:82:b1:9b:38:27:61:c5:f1:cb:6c:d7:c0:e1:58:8a:e6:41: 49:db:01:64:d5:7e:df:76:54:fd:6a:77:00:eb:dc:ef:8e:fe: a9:2f:61:98:dc:0d:37:1a:18:54:82:94:84:08:54:e5:ce:b2: 1e:76:73:96:80:1e:3f:11:2d:ff:5d:08:84:c6:6a:15:13:1d: a0:6f:a2:9e:15:90:3e:8d:e3:84:d3:45:ee:36:20:03:8f:f1: 50:ea:2f:85:cf:b9:6b:47:a7:7f:35:71:6b:0a:cb:7b:8a:6c: ea:46:b9:ef:1e:7c:5f:ae:8c:f5:59:98:a7:fb:c1:93:75:c2: e6:13:f3:78:8c:25:4e:1a:23:1d:69:1f:27:a8:28:26:50:ae: f2:f6:3d:61:69:e0:d7:c9:e4:0b:4b:95:0c:93:8d:7b:5c:ca: 4f:49:f1:15:d0:8d:2f:70:7b:60:f8:d4:a0:a2:d1:10:39:2c: c4:4e:ce:bb:4f:fb:42:4d:4b:34:35:fd:ef:e7:4b:ff:06:75: 42:d3:40:2d:ee:78:86:c6:6e:c3:aa:ea:86:ff:96:a7:e8:63: 22:ef:33:69:ae:ba:fd:01:1e:b3:bf:18:90:24:74:4c:8f:99: ad:93:45:c5 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICC5YwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx OERCNEUxMTAvBgNVBAUTKDQyNzU4REUwQ0MwQ0Y2MkMyQUVFRTkzRTBFRUU2Nzkw M0E1MDJDQ0MwHhcNMjQwNTE4MTkzODQ2WhcNMjQwNTI1MTkzODQ2WjAYMRYwFAYD VQQDEw02NjQ5MDNjNi1hZTdhMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAsmMU3BSclESx+FPOO5yF45BnSouQBhVFjFgHORM2A4H16hED+CLSRy0a6VKt r6S6DyT3/MquRQTrWRtm2GGP1ppOGgamXw1OLcCHOvyhqacmDyKdg7XJV+4gWSJO Vw7Ycfr4Cf347yDQVLWrQWGvCUexBFBg1tMBZljpAyXtAv1CGvXc828PAxqlTDG4 meVRJPu6mhmDl7wIRWUjqG1TjZYzujb4ogYkL3Wl+ClxahPvgjvCuCKviyaG8lra PUiom62gEg2tDvZwkoFcClMh8X6voYpoIMIIZ1WIBvbyOTm9QDb2CqYHeuwTtTF2 PZYVUwk0bjaiPMO3nxdGOJK4sQIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFP5g6gZV XRjf0bZlYuZra9kmIYyEMB8GA1UdIwQYMBaAFEJ1jeDMDPYsKu7pPg7uZ5A6UCzM MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4REI0RS83N0U3RjlBMDBD RTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlpd3E3dWstRHU1bmtEcFFM TXcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL1FuV040TXdNOWl3cTd1ay1EdTVua0RwUUxNdy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTE4 REI0RS83N0U3RjlBMDBDRTUxMUVBQTIwREREODJDNEY5QUUwMi9RbldONE13TTlp d3E3dWstRHU1bmtEcFFMTXcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCavK5G2gUs/oFfm64fnqUlODWwgrGbOCdhxfHLbNfA4ViK5kFJ2wFk 1X7fdlT9ancA69zvjv6pL2GY3A03GhhUgpSECFTlzrIednOWgB4/ES3/XQiExmoV Ex2gb6KeFZA+jeOE00XuNiADj/FQ6i+Fz7lrR6d/NXFrCst7imzqRrnvHnxfroz1 WZin+8GTdcLmE/N4jCVOGiMdaR8nqCgmUK7y9j1haeDXyeQLS5UMk417XMpPSfEV 0I0vcHtg+NSgotEQOSzETs67T/tCTUs0Nf3v50v/BnVC00At7niGxm7DquqG/5an 6GMi7zNprrr9AR6zvxiQJHRMj5mtk0XF -----END CERTIFICATE-----Generated at Sat May 18 20:48:20 2024 by rpki-client on console-fra.rpki-client.org